I.The number of days for user password to expire was zero (0) days, which means a user can use the same password for a very long time without being prompted by the system to change it at intervals
II.The system does not enforce a new user to change the system-generated password at first login (or subsequent logins) for the user to change the password; most users keep using the system-generated password for as long as possible.
III. If an unauthorized person gets hold of the users list or matrix, they can easily use the system-generated passwords to gain access into sensitive areas of the system
IV.Users can login into the GIFMIS at the same time with different systems (up to three (3) systems – laptop, desktop, mobile phones etc.) without previous systems logging out. Associates could possess a user’s password and use them to make unauthorized payments without an accurate audit trail
V.There are major delays in the process of modifying or revoking user’s privileges and access to financial transactions
VI.Some officers were still active users in the GIFMIS many months after they have been transferred to another department/MDA or retired.
The Accountant General of the Federation is requested to:
I. Design and implement a standardized logical access policy and user management guidelines to strengthen the logical access and password management with embedded controls according to best practices.
II.Automate the process of creating, modifying and de-activating users from the GIFMIS system
III.Enforce controls to guarantee that users can log into the application with only one device at a time.
IV.Apply sanctions relating to gross misconduct specified in paragraph 3129 of the Financial Regulations.
N/A
N/A
Click to enlarge image
Seach for project by title, MDA, state, status, year…
Do you know of project(s) in your community that has been abandoned, not executed or poorly implemented. Our team is ready to help you track it and get government to act.
Value for Money allows you to track, report and act on audited development projects abandoned, not executed or poorly implemented in your community to ensure public funds are efficiently, effectively, and economically utilized to improve service delivery to you and other citizens in Nigeria
Stay in the loop, get all project updates straight in your inbox.
